PT-2026-53363 · Pypi · Ajenti-Plugin-Core

Published 2026-06-29 · Updated 2026-06-29

OSV

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact

If the 2FA was activated, it was possible to bypass the password authentication

Patches

This is fixed in the version 0.112. Users should upgrade to this version as soon as possible.

Fix

Related Identifiers

PYSEC-2026-266

Affected Products

Ajenti-Plugin-Core

References · 6

• https://osv.dev/vulnerability/PYSEC-2026-266 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40177 · Security Note
• https://github.com/ajenti/ajenti · Note
• https://github.com/ajenti/ajenti/security/advisories/GHSA-3mcx-6wxm-qr8v · Note
• https://github.com/advisories/GHSA-3mcx-6wxm-qr8v · Note
• https://pypi.org/project/ajenti-plugin-core · Note